Telnet and SSH

Answered Question
Apr 5th, 2010
User Badges:

Is it possible to have another public IP address (i.e. 66.102.7.000) to telnet and SSH to the ASA 5510 remotely?  If it is possible, how would you setup the telnet and SSH?  Attached is the config.  Thanks.


Laura

Attachment: 
Correct Answer by Jon Marshall about 7 years 3 weeks ago

laurabolda wrote:


Thanks for your prompt response again, Jon.  Your command works.  But, I am not able to SSH to the ASA from my computer 66.102.7.10.  In your previous reply, you said I need to setup the domain name, crypo key generated, etc.  How do I setup all the prerequisities so that I can SSH to the ASA?


Also, can I setup SSH on the selected subnet?  For example, can I do this?


SSH outside 66.102.7.0 255.255.255.0

and

SSH outside 66.102.16.0 255.255.255.0


Thanks.


Laura


Laura


This doc gives the full details for setting up SSH on an ASA firewall -


ASA ssh configuration


Yes you can use a subnet rather than a host entry as you have done above.


Jon


Correct Answer by Jon Marshall about 7 years 3 weeks ago

laurabolda wrote:


Thanks for your prompt response, Jon.


For clarification, if my computer IP address is 66.102.7.10, can I SSH to the ASA (outside interface 109.66.25.80)? If I can, how would you set it up on the ASA?  Is it the same command as your previous response?


Thanks.


Laura


Laura yes it would be -


ssh outside 66.102.7.10 255.255.255.255


Jon

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
Loading.
Jon Marshall Mon, 04/05/2010 - 08:41
User Badges:
  • Super Blue, 32500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN

Laura


SSH yes, telnet no.


You cannot telnet from the outside of the ASA to the ASA itself unless the telnet is within an IPSEC tunnel.


For ssh, assuming all the other other things have been setup ie. domain name, crypto key generated etc..


ciscoasa(config)# ssh 66.102.7.1 outside


Jon


Cisco are currently donating money to the Haiti earthquake appeal for every rating so please consider rating all helpful posts.

laurabolda Mon, 04/05/2010 - 08:58
User Badges:

Thanks for your prompt response, Jon.


For clarification, if my computer IP address is 66.102.7.10, can I SSH to the ASA (outside interface 109.66.25.80)? If I can, how would you set it up on the ASA?  Is it the same command as your previous response?


Thanks.


Laura

Correct Answer
Jon Marshall Mon, 04/05/2010 - 09:26
User Badges:
  • Super Blue, 32500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN

laurabolda wrote:


Thanks for your prompt response, Jon.


For clarification, if my computer IP address is 66.102.7.10, can I SSH to the ASA (outside interface 109.66.25.80)? If I can, how would you set it up on the ASA?  Is it the same command as your previous response?


Thanks.


Laura


Laura yes it would be -


ssh outside 66.102.7.10 255.255.255.255


Jon

laurabolda Mon, 04/05/2010 - 10:19
User Badges:

Thanks for your prompt response again, Jon.  Your command works.  But, I am not able to SSH to the ASA from my computer 66.102.7.10.  In your previous reply, you said I need to setup the domain name, crypo key generated, etc.  How do I setup all the prerequisities so that I can SSH to the ASA?


Also, can I setup SSH on the selected subnet?  For example, can I do this?


SSH outside 66.102.7.0 255.255.255.0

and

SSH outside 66.102.16.0 255.255.255.0


Thanks.


Laura

Correct Answer
Jon Marshall Mon, 04/05/2010 - 10:28
User Badges:
  • Super Blue, 32500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN

laurabolda wrote:


Thanks for your prompt response again, Jon.  Your command works.  But, I am not able to SSH to the ASA from my computer 66.102.7.10.  In your previous reply, you said I need to setup the domain name, crypo key generated, etc.  How do I setup all the prerequisities so that I can SSH to the ASA?


Also, can I setup SSH on the selected subnet?  For example, can I do this?


SSH outside 66.102.7.0 255.255.255.0

and

SSH outside 66.102.16.0 255.255.255.0


Thanks.


Laura


Laura


This doc gives the full details for setting up SSH on an ASA firewall -


ASA ssh configuration


Yes you can use a subnet rather than a host entry as you have done above.


Jon


laurabolda Mon, 04/05/2010 - 14:49
User Badges:

Thank you very much, Jon.  Your instructions and documentation work.


Laura

Actions

This Discussion